CVE-2020-6770 - Vulnerability Details - OpenCVE

Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Bosch	Bosch Video Management System Mobile Video Service Divar Ip 3000 Divar Ip 3000 Firmware Divar Ip 7000 Divar Ip 7000 Firmware

Configuration 1 [-]

OR	cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service::::::::
	cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service::::::::
	cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service::::::::
	cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service::::::::

Configuration 2 [-]

AND

cpe:2.3:o:bosch:divar_ip_3000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:bosch:divar_ip_3000:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:bosch:divar_ip_7000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:bosch:divar_ip_7000:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: bosch

Published: 2020-02-07T20:08:31.437569Z

Updated: 2024-09-17T04:09:12.828Z

Reserved: 2020-01-10T00:00:00

Link: CVE-2020-6770

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-02-07T21:15:10.760

Modified: 2024-11-21T05:36:09.940

Link: CVE-2020-6770

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "DIVAR IP 3000", "vendor": "Bosch", "versions": [{"status": "affected", "version": "All"}]}, {"product": "DIVAR IP 7000", "vendor": "Bosch", "versions": [{"status": "affected", "version": "All"}]}, {"product": "BVMS Mobile Video Service", "vendor": "Bosch", "versions": [{"lessThanOrEqual": "8.0.0.329", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThanOrEqual": "9.0.0.827", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThanOrEqual": "10.0.0.1225", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThanOrEqual": "7.5", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "datePublic": "2020-01-29T00:00:00", "descriptions": [{"lang": "en", "value": "Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-02-07T20:08:31", "orgId": "c95f66b2-7e7c-41c5-8f09-6f86ec68659c", "shortName": "bosch"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html"}], "source": {"advisory": "BOSCH-SA-885551-BT", "discovery": "INTERNAL"}, "title": "Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@bosch.com", "DATE_PUBLIC": "2020-01-29T13:00:00.000Z", "ID": "CVE-2020-6770", "STATE": "PUBLIC", "TITLE": "Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "DIVAR IP 3000", "version": {"version_data": [{"configuration": "vulnerable BVMS MVS version installed", "version_affected": "=", "version_value": "All"}]}}]}, "vendor_name": "Bosch"}, {"product": {"product_data": [{"product_name": "DIVAR IP 7000", "version": {"version_data": [{"configuration": "vulnerable BVMS MVS version installed", "version_affected": "=", "version_value": "All"}]}}]}, "vendor_name": "Bosch"}, {"product": {"product_data": [{"product_name": "BVMS Mobile Video Service", "version": {"version_data": [{"configuration": "patch for security issue 243748 not installed", "version_affected": "<=", "version_value": "8.0.0.329"}, {"configuration": "patch for security issue 243748 not installed", "version_affected": "<=", "version_value": "9.0.0.827"}, {"configuration": "patch for security issue 243748 not installed", "version_affected": "<=", "version_value": "10.0.0.1225"}, {"version_affected": "<=", "version_value": "7.5"}]}}]}, "vendor_name": "Bosch"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-502 Deserialization of Untrusted Data"}]}]}, "references": {"reference_data": [{"name": "https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html", "refsource": "CONFIRM", "url": "https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html"}]}, "source": {"advisory": "BOSCH-SA-885551-BT", "discovery": "INTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T09:11:04.976Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html"}]}]}, "cveMetadata": {"assignerOrgId": "c95f66b2-7e7c-41c5-8f09-6f86ec68659c", "assignerShortName": "bosch", "cveId": "CVE-2020-6770", "datePublished": "2020-02-07T20:08:31.437569Z", "dateReserved": "2020-01-10T00:00:00", "dateUpdated": "2024-09-17T04:09:12.828Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC942683-9FC3-4C2B-9502-91B3DCBF94D7", "versionEndIncluding": "7.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCDA17DC-C03A-4732-A00E-30DA535B2F42", "versionEndIncluding": "8.0.0.329", "versionStartIncluding": "8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1CDC5D3-12F9-4AEA-9396-7839405348C1", "versionEndIncluding": "9.0.0.827", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:bosch:bosch_video_management_system_mobile_video_service:*:*:*:*:*:*:*:*", "matchCriteriaId": "4FE6B5DA-C720-4368-BFDB-B12626B23F25", "versionEndIncluding": "10.0.0.1225", "versionStartIncluding": "10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:bosch:divar_ip_3000_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8C3A02A4-2AD4-45A8-AD9D-239A536A8D66", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:bosch:divar_ip_3000:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7EE760B-9B65-49A3-92E5-93880C58A628", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:bosch:divar_ip_7000_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7CCD42BE-E4B7-43FC-95FB-C97704E5C268", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:bosch:divar_ip_7000:-:*:*:*:*:*:*:*", "matchCriteriaId": "10D23E90-110B-4ADC-8417-CD0149D126D2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed."}, {"lang": "es", "value": "Una Deserializaci\u00f3n de Datos No Confiables en el BVMS Mobile Video Service (BVMS MVS), permite a un atacante remoto no autenticado ejecutar c\u00f3digo arbitrario sobre el sistema. Esto afecta Bosch BVMS versiones 10.0 anteriores a 10.0.0.1225 incluy\u00e9ndola, 9.0 anteriores a 9.0.0.827 incluy\u00e9ndola, 8.0 anteriores a 8.0.0.329 incluy\u00e9ndola y 7.5 y anteriores. Esto afecta a Bosch DIVAR IP 3000 y DIVAR IP 7000 si una versi\u00f3n vulnerable de BVMS es instalada."}], "id": "CVE-2020-6770", "lastModified": "2024-11-21T05:36:09.940", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "psirt@bosch.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-02-07T21:15:10.760", "references": [{"source": "psirt@bosch.com", "tags": ["Vendor Advisory"], "url": "https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html"}], "sourceIdentifier": "psirt@bosch.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "psirt@bosch.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-502"}], "source": "nvd@nist.gov", "type": "Primary"}]}